Static | ZeroBOX

PE Compile Time

1970-01-01 09:00:00

PE Imphash

b2e121c8fb86c781c89c83ffff7fe337

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x006b2f10 0x006b3000 6.11179669328
.data 0x006b4000 0x0006b3f0 0x0006b400 5.31830724283
.rdata 0x00720000 0x008d4a70 0x008d4c00 6.11415486896
.pdata 0x00ff5000 0x00000d80 0x00000e00 5.23361438871
.xdata 0x00ff6000 0x00000b90 0x00000c00 4.18621410085
.bss 0x00ff7000 0x0006d020 0x00000000 0.0
.edata 0x01065000 0x0000004e 0x00000200 0.912983963623
.idata 0x01066000 0x00001364 0x00001400 4.61793111798
.CRT 0x01068000 0x00000070 0x00000200 0.471394621481
.tls 0x01069000 0x00000010 0x00000200 0.0
.rsrc 0x0106a000 0x0000152c 0x00001600 6.87228935116
.reloc 0x0106c000 0x0001df8c 0x0001e000 5.43392541957

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0106a13c 0x00000d04 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced
RT_GROUP_ICON 0x0106ae40 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0106ae54 0x000002a4 LANG_DANISH SUBLANG_DEFAULT data
RT_MANIFEST 0x0106b0f8 0x00000434 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text

Imports

Library KERNEL32.dll:
0x141066464 AddAtomA
0x141066474 CloseHandle
0x14106647c CreateEventA
0x141066484 CreateFileA
0x14106648c CreateIoCompletionPort
0x141066494 CreateMutexA
0x14106649c CreateSemaphoreA
0x1410664a4 CreateThread
0x1410664ac CreateWaitableTimerA
0x1410664b4 CreateWaitableTimerExW
0x1410664bc DeleteAtom
0x1410664c4 DeleteCriticalSection
0x1410664cc DuplicateHandle
0x1410664d4 EnterCriticalSection
0x1410664dc ExitProcess
0x1410664e4 FindAtomA
0x1410664ec FormatMessageA
0x1410664f4 FreeEnvironmentStringsW
0x1410664fc GetAtomNameA
0x141066504 GetConsoleMode
0x14106650c GetCurrentProcess
0x141066514 GetCurrentProcessId
0x14106651c GetCurrentThread
0x141066524 GetCurrentThreadId
0x14106652c GetEnvironmentStringsW
0x141066534 GetHandleInformation
0x14106653c GetLastError
0x141066544 GetProcAddress
0x14106654c GetProcessAffinityMask
0x14106655c GetStartupInfoA
0x141066564 GetStdHandle
0x14106656c GetSystemDirectoryA
0x141066574 GetSystemInfo
0x14106657c GetSystemTimeAsFileTime
0x141066584 GetThreadContext
0x14106658c GetThreadPriority
0x141066594 GetTickCount
0x1410665a4 IsDBCSLeadByteEx
0x1410665ac IsDebuggerPresent
0x1410665b4 LeaveCriticalSection
0x1410665bc LoadLibraryA
0x1410665c4 LoadLibraryW
0x1410665cc LocalFree
0x1410665d4 MultiByteToWideChar
0x1410665dc OpenProcess
0x1410665e4 OutputDebugStringA
0x1410665f4 QueryPerformanceCounter
0x141066604 RaiseException
0x14106660c ReleaseMutex
0x141066614 ReleaseSemaphore
0x141066624 ResetEvent
0x14106662c ResumeThread
0x141066634 SetConsoleCtrlHandler
0x14106663c SetErrorMode
0x141066644 SetEvent
0x14106664c SetLastError
0x141066654 SetProcessAffinityMask
0x14106665c SetProcessPriorityBoost
0x141066664 SetThreadContext
0x14106666c SetThreadPriority
0x14106667c SetWaitableTimer
0x141066684 Sleep
0x14106668c SuspendThread
0x141066694 SwitchToThread
0x14106669c TlsAlloc
0x1410666a4 TlsGetValue
0x1410666ac TlsSetValue
0x1410666b4 TryEnterCriticalSection
0x1410666bc VirtualAlloc
0x1410666c4 VirtualFree
0x1410666cc VirtualProtect
0x1410666d4 VirtualQuery
0x1410666dc WaitForMultipleObjects
0x1410666e4 WaitForSingleObject
0x1410666ec WideCharToMultiByte
0x1410666f4 WriteConsoleW
0x1410666fc WriteFile
0x141066704 __C_specific_handler
Library msvcrt.dll:
0x141066714 ___lc_codepage_func
0x14106671c ___mb_cur_max_func
0x141066724 __getmainargs
0x14106672c __initenv
0x141066734 __iob_func
0x14106673c __lconv_init
0x141066744 __set_app_type
0x14106674c __setusermatherr
0x141066754 _acmdln
0x14106675c _amsg_exit
0x141066764 _beginthread
0x14106676c _beginthreadex
0x141066774 _cexit
0x14106677c _commode
0x141066784 _endthreadex
0x14106678c _errno
0x141066794 _fmode
0x14106679c _initterm
0x1410667a4 _lock
0x1410667ac _memccpy
0x1410667b4 _onexit
0x1410667bc _setjmp
0x1410667c4 _strdup
0x1410667cc _ultoa
0x1410667d4 _unlock
0x1410667dc abort
0x1410667e4 calloc
0x1410667ec exit
0x1410667f4 fprintf
0x1410667fc fputc
0x141066804 free
0x14106680c fwrite
0x141066814 localeconv
0x14106681c longjmp
0x141066824 malloc
0x14106682c memcpy
0x141066834 memmove
0x14106683c memset
0x141066844 printf
0x14106684c realloc
0x141066854 signal
0x14106685c strerror
0x141066864 strlen
0x14106686c strncmp
0x141066874 vfprintf
0x14106687c wcslen

Exports

Ordinal Address Name
1 0x141063260 _cgo_dummy_export
!This program cannot be run in DOS mode.
``.data
.rdata
`@.pdata
0@.xdata
0@.bss
.edata
0@.idata
.reloc
AUATUWVSH
[^_]A\A]
[^_]A\A]
8cpu.u
UUUUUUUUH!
33333333H!
t*H9HPt$
debugCal
debugCal
debugCalH9
debugCalH9
l819uq
debugCalH9
84t6H9
runtime.H9
runtime H
error: H
L9h(t
7H9S u
29t$0u
D9\$Pt
7H9S u
H9t$0u
2H9t$0u
L9\$Pt
L9\$Pt
7H9S u
L$xM9H
8H9S u
H9BpwJ@
H9P8tkH
\$(H9C8u
H9D$(t
W0H9P0tK
D$XHcL$
tE8Z t/H
\$0H9K
D$pH9H
D$0H9H
T$ H+:
UUUUUUUUH!
UUUUUUUUH
wwwwwwwwH!
wwwwwwwwH
D$$t H
J0H9J8vxL
H9{8uMf
kernel32H
l32.dll
AddDllDiH
rectory
AddVectoH
redContiH
ContinueH
Handler
LoadLibrH
raryExA
LoadLibrH
raryExW
advapi32H
i32.dll
SystemFuH
stemFuncH
tion036
ntdll.dlH
NtWaitFoH
ForSinglH
eObject
RtlGetCuH
tlGetCurH
rentPeb
RtlGetNtH
tVersionH
Numbers
winmm.dlH
timeBegiH
nPeriod
timeEndPH
dPeriod
ws2_32.dH
_32.dll
WSAGetOvH
verlappeH
dResult
wine_getH
ine_get_H
version
powrprofH
rof.dll
PowerRegH
gisterSuH
spendResH
umeNotifH
ication
GetSysteH
mTimeAsFH
ileTime
QueryPerH
formanceH
Counter
QueryPerH
formanceH
rmanceFrH
equency
runtime.
QxM9Qpu
T$@H9P
H9A(ub
runtime.H9
reflect.H9
D$#e+H
I9N0t_H
D$PD9D$T
H9QPt#H
rpH92w
I9N0tSH
\$PH9p
memprofiH93u<
lerau3f
memprofiH
memprofiH
memprofiH
t H9APt
I9@8u3
r09q0s-f
,$L9+w
|$0H98
Q8H+Q(H
X(HcH0H
H9D$@A
HcD$4f
H9D$@A
\$HH9S@
H9D$8A
go 1.19 H
runtime.H
gopau$f
runtime.H
|$PH97u*
gopau!f
runtime.H9
gopau&f
runtime.H
runtime.H
G0I9F0t9
runtime.H9
P8H9W8t
f9w2uy
O@H9H@
H+H H+H(H+H0H
8noneuZ1
8crasuF
8singu
8systu
l$0M9,$u
l$PM9,$u
X0H;CPtTH
sPH91u
l$ M9,$u
l$0M9,$u
l$PM9,$u
H+t$(H
0Hc\$8H
HHc\$PH
l$8M9,$u
l$8M9,$u
l$(M9,$u
l$ M9,$u
P+8S+t
x H9{ u6H
x(H9{(uWH
Q H9S u*H
Q(H9S(u
Q18S1u
P8H9S8u*H
P@H9S@u H
PHH9SHu
PPH9SPu
H9{(uF
x09{0u>
x49{4u6H
H08K0u
P(H9S(u
H9L$0uQH
H9L$@uuH
L$PH9T$Hu
@2fD9C2u
@0fD9C0u
P@H9S@t
P@H9S@u}H
l$ M9,$u
UUUUUUUUH!
33333333H!
D$HtDD
D$HtSD
l$ M9,$u
l$0M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$
l$8M9,$u
l$(M9,$u
l$ M9,$
J(H9B t
H9K0uZH
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
\$0H9S
\$0H9S
H8H9X@
P2f9S2u
P@H9S@
struct {H
struct {H
reflect.H9
reflect.
CallSlicL9'u
p8H9x@vYH
uRH9x@
P8H9H@
PPH9SPu
PXH9SXu
Z(H9F u>
\$0H9S0u!H
Q8H9S8u
Q@H9S@u
IHH9KH
l$8M9,$
l$`M9,$u
l$(M9,$u
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$
l$8M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$0M9,$u
l$(M9,$
l$0M9,$u
l$0M9,$u
l$(M9,$
l$0M9,$u
l$HM9,$u
l$(M9,$u
l$@M9,$u
l$8M9,$
l$0M9,$u
l$8M9,$u
l$(M9,$
l$(M9,$
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$XM9,$
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$(M9,$u
l$(M9,$
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
H H9K u(H
H(H9K(u
H8H9K8
T$0H)B
T$0H9J
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$
l$ M9,$u
|$09w0uc
r49w4u[H
O@H9G8uI
|$09wHu*
rL9wLu
\$0H9S
I H9K
L$`u3H
L$`u>H
l$(M9,$u
~(H9z(u&
x H9{ u
-070u!D
-07:00:0M9
-07:00:0L
-07:00:0
Januu!D
-07:00:0
-07:00:0
-07:00:0
Z070u"D
Z07:00:0M9
Z07:00:0L
-07:00:0
-07:00:0
-07:00:0
-07:00:0
2006u-H)
-07:00:0
time.DatH
time.LocL
time.LocH
ocation(H
time.UTCL
Mc$$M9
Mc$$M)
8WITAuP
t$Ow2M
;nullu
8Locau
tzdau;
x8H9{8
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$PM9,$
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$8M9,$u
l$(M9,$
l$8M9,$
l$(M9,$
l$(M9,$
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$
l$0M9,$u
l$0M9,$u
l$`M9,$
l$HM9,$u
>..t4H9
J(H9B t
H 9K u3
H$9K$u+
H(9K(u#
H,9K,u
H09K0u
H49K4u
H 9K u
H(H9K(u
t$PHcX(
t$pHc^(H
;fileu
unixgram
unixpackf
;udp4t
;udp6ui
l$(M9,$u
l$(M9,$u
8..u[H
?fileumH
8\??\t=H
xPH9{Pu~
xX9{Xuv
x\9{\un
x`9{`uf
xd@8{du\H
l$ M9,$u
l$0M9,$u
l$0M9,$u
method:H
l$@M9,$u
l$@M9,$u
l$@M9,$u
l$@M9,$u
(BADINDEI
(MISSINGI
%!(BADWIL
%!(BADPRL
BADPREC)L
%!(EXTRAM
%!(NOVERM
P(H9P@
t$$f9D$$w
f9D$&r
|$$f9D$$
f9D$&r
d$ f9D$ w
f9D$"r
H9t$X|4
H9T$ t
L9L$Ht
Z(H9F t
l$@M9,$
l$@M9,$
t2PH9rH
d$Ht_H
l*PL9jHt"L
~>rTL)
l$@M9,$u
l$ M9,$u
8n<OwG
l$PM9,$
l$PM9,$
l$PM9,$
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
|$0H9w
D$(f9P(u
P*8S*u
l$ M9,$u
l$ M9,$
l$8M9,$u
|$HH9w@}
;falsu
l$(M9,$u
~ r(H)
l$(M9,$u
l$(M9,$u
l$(M9,$u
~"r9H)
Z H9J(u
|$0H9w uFH
B(H9O0u4H
H9r@u&
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$
l$ M9,$u
l$pM9,$
l$(M9,$u
l$8M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$u
l$HM9,$
P8H9S8u
T$0H9J
l$ M9,$u
l$ M9,$u
x H9{ u
8leaku
T$08J
[::ffff:N
invalid J
d PrefixJ
x(H9{(uUH
l$@M9,$u
l$HM9,$u
l$0M9,$u
l$@M9,$u
l$(M9,$u
l$@M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$pM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
H9P0u$H
H9P0u$H
H9P0u$H
H9P0u"H
l$8M9,$u
T$08J
D$(uMH
9windu
:andru
:windu
:planu9
:fileu7H
:bindu4H
9solauJf
myhostnaf
M9"u[fA
myhostna
:fileu
:dnuTA
:mdnsu
?filef
myhostnaM9
<$succu fA
<$unav
notfoundI94$t
tryagainM9
?retuu
:fileu
myhostnaD
9tcp4tY
9tcp6tQ
9udp4tG
9udp6t?
9unixt7
unixgramH9
unixpackH9
:dialu2L
unixgram
unixpackL9
8unixtD
unixgramH9
unixpackH9
<$tcu)A
l$(M9,$u
l$(M9,$u
ip6.arpaH
:CNAMuh
8CNAMu.A
>tcp4t
l$0M9,$u
?ipt9f
?tcp4t"
?tcp6t
?udp4t
?tcp4t
?udp4t
?tcp4t
?udp6u~H
\$xu H
9listu8fA
<$dial
8tcp4t
8tcp6u*
8udp4t
8udp6u
l$ M9,$u
l$ M9,$u
:uduxA
:tcp4t
:tcp6t
:udp4t
:udp6u8H
9tcp4t
9tcp6u&
9udp4t
9udp6u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
:acceuNf
~NrvH)
unixgramM9/u8I
unixpackM9/u
unixgramL9
unixpack
unixgramL9
unixpack
8udp4t
unixgramH9
unixpackH9
listubfA
N(H9F u_
N8H9F0u:
H9{(uu
x0@8{0uk
x1@8{1ua
@8{2uUH
x 9{ u
x$9{$u
l$@M9,$u
l$@M9,$u
l$ M9,$
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$
l$ M9,$u
l$ M9,$
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$HM9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$HM9,$
x H9{ u6H
kernel32
~(H9z(u&
x H9{ u
x H9{ u
P0H+P(H
P0H+P(H
W0H+W(H
P0H+P(H
p(H9p0
\$@H9H
P(H9P0u@H
H0H+H(H
W0H+W(H9W
W(H9W0~)H
PXH+PPH
WXH+WPH
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
8infot
8debuu
8paniu
8warnu!f
\$@t2H
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$HM9,$u
l$ M9,$u
l$ M9,$u
H3T8 L3L8(I
H1T$0H
H1T$HH
H1T$PH
l$HM9,$u
o\$ fE
o\$0fE
o\$@fE
o\$PfE
o\$`fE
o\$pfE
l$HM9,$u
l$HM9,$u
l$8M9,$u
x H9{ u@H
x(H9{(u6H
:T^8rv
D$ffPH
~d$ fE
ot$PfA
S H+Q H
P H1s
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
;nullu
<Ot-<XtL
l$0M9,$u
l$0M9,$u
l$(M9,$u
P8H9S8u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$0M9,$u
l$8M9,$u
l$HM9,$u
l$8M9,$u
l$8M9,$u
optionalH9
explicit
explicitf
optionalH
explicitH
explicit
optionalH
explicitH
generaliL9
generaliH
printabl
printablH
8numeu
8utf8u
default:L9
default:E1
8tag:A
applicat
optionalH
explicitH
generaliI
printablI
default:I
applicat
applicat
optionalH
explicitH
generaliI
printablI
default:I
applicat
omitempt
omitempt
optionalH
explicitH
optionalH
explicitH
l$8M9,$u
l$8M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$8M9,$
l$8M9,$
l$@M9,$u
l$8M9,$
l$@M9,$u
l$8M9,$
l$8M9,$
l$@M9,$u
H9P }]
L$H8L$'u
L$H8L$'u
H9P }N
L9B }Y
L9B }Z
H9P }a
H9P }P
IV for EH
CDSA CTRH
9P-25uP
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$8M9,$
l$8M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$ M9,$u
\$0H9S
\$0H9S
I H9K
XfffffffH
ffffffffH
l$HM9,$
l$PM9,$
l$`M9,$
T$0H9J
|$HH9w u
<$tI<&tE
r8H9Z@t
rpH9Zxt
8..uHL
8//uOH
J(H9B t
l$0M9,$
l$@M9,$
x @8{ u6H
{0H9x0
{PH9xP
xY@8{Y
{xH9xx
l$8M9,$u
QZ^&A!
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
PXH9SXu
P`H9S`u
CERTIFIC
H92u$f
8S(udH
T$0H9P
H95AhK
H95!fK
HHH9pPuDH
WHL9GPt
D$@H9D$
|$`H9\$hu
D$xH9L$Hu
T$0H9J
D$@H9D$
l$`M9,$
l$ M9,$u
l$8M9,$
l$0M9,$u
l$HM9,$u
P(H9S(u$H
SHH9PHu
HHH9P@u H
l$8M9,$u
L)@pL)
2-byD1
$2-byD
nd 3E3K
2-byE3K
te kA3K
>E3C4D
expaD3P A
expaD1
expaD3
expand 3H
2-byte kH
l$ M9,$u
fE9,$u
DOWNGRD
DOWNGRD
<LfD9x
\$huXH
H9P }S
L9X }_
H9P }N
H9P }N
L9H }j
H9P }N
H9P }N
H9P }N
H9P }V
L9H }_
H9P }N
H9P }V
L9H }j
L9B }Q
H9P }V
L9H }j
L9H }j
H9P }V
H9P }V
L9H }j
L9@ }Y
L9B }Q
H9P }N
L9X }_
L9@ }^
H9P }Y
H9P }N
H9P }N
H9P }V
H9P }H
H9P }V
H9P }H
L9@ }\
H9P }V
H9P }H
H9P }N
L9B }V
H9P }N
H9T$h}:
L9@ }Y
L9B }V
H9T$h}:
H9P }N
H9P }I
H9T$h}:
L9@ }Y
H9P }N
H9P }N
H9T$h}:
L9@ }Y
L9@ }^
L9@ }^
L9@ }^
L9@ }^
L9@ }^
L9@ }^
L9@ }^
H9P }N
L9H }j
L9H }j
H9T$h}:
H9P }a
L9@ }\
L9@ }^
H9P }N
L9@ }_
H9P }N
H9P }N
H9T$h}:
L9@ }Y
H9P }N
H9T$h}:
H9P }N
H9T$h}:
L9@ }\
H9P }N
fE9J@r
:h2u3I
http/1.1M9}
http/1.1
http/1.1
http/1.1
c@fE9"u
SPL9CX
s H9K(t
s8H9K@t
shH9Kpt
H9P }N
D$*tls1f
H9P }a
L9B }V
key expaH9
master sH9
client fH9
server fH9
inisuqf
H9T$x}:
H9T$x}:
H9P }N
H9P }N
H9P }N
CERTIFICL9
CERTIFICL
CERTIFICL
CERTIFICI
PRIVATE L9
PRIVATE I
PRIVATE
PRIVATE L
CERTIFICH92
H9P }T
H9W }W
H9W }H
T$0H9J
T$0H9J
l$ M9,$u
l$`M9,$u
l$0M9,$u
l$ M9,$
l$(M9,$u
l$(M9,$u
H0L+H(I
X0H+X(
l$8M9,$u
l$(M9,$u
us-asciiH9
8utf-u
text/plaH
text/pla
text/plaH
text/plaH
text/plaH
text/plaH
distinctH9
form-dat
form-datL9
form-datH
form-datH
form-datH
L$(tBI
form-datH92u
^0H+^(H
:--u0H
L$@H9N0t
l$0M9,$u
l$0M9,$u
l$8M9,$
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
trbH)
D$HH9N
H9H sJ
I9@ sML
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$8M9,$u
l$8M9,$u
l$HM9,$u
l$HM9,$u
XD9X4v
P09P4s
H9pxu*H
L9L$X~
l$8M9,$u
l$8M9,$u
l$HM9,$u
l$HM9,$u
x @8{ u6H
X0H+X(
Q0M+Q(f
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$
l$8M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
:httpu
:httpuDH
:httpu
:socku
localhosH9
x @8{ u6H
l$ M9,$u
x(H9{(u_
x0@8{0uUH
8domaf
httponlyL9
samesiteL9
8noneu:H
8striu
; DomainL
; ExpireL
; Max-AgL
; Max-AgL
ax-Age=0L
; HttpOnL
; SecureL
; SameSiH
Site=LaxH
; SameSiH
ite=NoneH
H)H(H)
Z(H)Z0L
8:metu
8:schu
:authoriM9
L9T$Xu
l$ M9,$u
l$(M9,$u
l$ M9,$u
9readudH
:wsaru:f
l$8M9,$u
l$0M9,$u
l$0M9,$u
8httpf
8httpu$
:httpu
100-contH9
:CONNuXf
8Traif
Content-H9
LenguEf
9closu
Trailer:L9
Trailer:E1
>HEADtmD
l$0M9,$u
trailersH92t=
trailers
l$(M9,$u
t$p9^`
multiparH9
>CONNuMf
HTTP/1.0H9
HTTP/1.1
8CONNu=fA
no-cacheH92
HTTP/2.0H9
>POSTt(I
>PATCuR
no-cacheH92
:chunu
>chunu
X0H+X(H
>HEADu
Trailer:L9
Trailer:E1
l$(M9,$u
L$(H)H(
9POSTuWH
9PRuYA
HTTP/2.0M9#A
9CONNu
9HEADA
Trailer:H9
Trailer:1
keep-aliH92u
8closu
identityH
identityE1
identity
identityH
<$HEADt7L
:HEADtHH
9readu
H9~(t:H
PUT uo
http/1.0f
http/1.1H92
L$0I9H@u
8OPTIu
l$(M9,$u
l$(M9,$u
>HEAD@
>chunf
>chunu
>chunu
9CONNu
9HEADtd
9DELEu
9SEARu^f
9OPTIuFf
PROPFINDH9
l$ M9,$u
;chunu
;POSTt-
identityH9
;HEADu
8Traiukf
Content-H9
Lengu6f
>HEADuhH
>HEADt'H
?HEADu
Content-
z H9~ u2
J0H9B(t
H!8K!u
H(H9K(
H9w u+H
r(H9w(u!H
\$0H9S
O(H9G t
\$0H9S
l$ M9,$u
l$ M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$8M9,$u
l$(M9,$u
l$0M9,$u
l$PM9,$
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$
l$0M9,$u
l$PM9,$
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$HM9,$u
l$8M9,$u
l$8M9,$u
l$hM9,$
l$HM9,$u
l$HM9,$u
l$HM9,$u
l$HM9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$
l$0M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$
l$0M9,$u
l$ M9,$u
l$(M9,$u
l$0M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$
l$0M9,$u
l$ M9,$u
l$(M9,$u
l$0M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$
l$0M9,$u
l$ M9,$u
l$(M9,$u
l$0M9,$u
l$ M9,$u
l$8M9,$u
l$0M9,$u
l$(M9,$u
l$PM9,$
l$(M9,$u
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$
l$ M9,$
l$@M9,$u
l$0M9,$u
l$0M9,$u
l$XM9,$u
l$(M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$ M9,$
l$0M9,$
l$0M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$
l$0M9,$u
l$HM9,$
l$ M9,$u
l$XM9,$
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
T$hA82
M9aPuSM
P(L9H8
s(H9K0u
PXH9SXt
s`H9Kht
H9SHu7H
PPH9SPu-H
APL9AH
l$ M9,$
l$ M9,$
OHI9WP~
E9L$0vPM
E9L$0vSL
E9i0v3L
E9i0v3L
E9i0v3L
E9i0v3L
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$@M9,$u
l$ M9,$u
l$ M9,$u
l$8M9,$u
L9L$0s
oD$@fA
oL$PfA
oT$`fA
od$pfE
93V@3NDD3FHD3NL
93VP3NTD3FXD3N\
93V 3N$D3F(D3N,
93V`3NdD3FhD3Nl
93V03N4D3F8D3N<
93Vp3NtD3FxD3N|
oD$0fA
D3F0D3N 3F
D3N43F$
93N(D3F
3N<D3F,D3N
D$HSOI
D$DSUI
*<ht <pt
*<ht <pt
D$Lxkv1H
D$Lxkv1H
l$8M9,$u
l$HM9,$u
l$hM9,$
vmM3$0M
D$Ds2idf
D$N2sH
D$"s2idf
D$ 2sH
D$>2sH
^H9pH|
D$4H9H(}ZH9
bH9pH|
D$8H9G(}^f
8S2sTu
^H9pH|
H9H(}_H9
^H9pH|
D$8H9G(}HH
p(H+p H9
l$(M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$ M9,$u
l$ M9,$u
l$8M9,$u
S(H9P(u
l$0M9,$u
l$0M9,$u
T$`H9V8}^L
# labelI
labels: I
runtime.
runtime.A
runtime.L9
runtime.E1
runtime.E1
runtime.D
runtime.A
l$ M9,$u
9muteuc
runtime.H91u5
runtime.H
runtime.M9
\$hH9T$puvL
runtime.H9
runtime.E1
l$ M9,$u
H9K uWH
x0H9{0uM
x8@8{8uC
x9@8{9u9H
H9{ uAH
x(H9{(u7H
;TRUEt
;Truet
;trueuK1
;FALSu
;Falsu
;falsu
H9J ubD
H0H9X8
helpt f
l$@M9,$u
l$ M9,$u
N(H9F u,
Z0H9J8u
9heapuxfA
heapz_v2M9
heapprofM9
:v2u H
samplingH
ms sinceH
cycles/sH
resolutiH
:formu(f
P@H9HH
H9Q uCH
x H9{ u@H
x(H9{(u6H
p H9K(u}H
x8H9{8us
x@@8{@ui
xA@8{Au_
xB@8{BuU
xC@8{CuKH
xHH9{HuAH
xPH9{Pu7H
{ H9x
x0H9{0
H9{8uuH
x@H9{@ukH
xHH9{HuaH
H9{PuUH
H9x uaH
x0H9{0uWH
x(H9{(uUH
l$0M9,$u
>heapu
l$8M9,$u
x(H9{(u_H
x0H9{0uUH
L+n M9
H+O I9
L+O I)
HPH9HX~
XPH9HX
\$Vt\L
\$pt\H
|$PsVL9
t$@vQI
?fA9:w
fA9<$w
>fA9:vUL9
?fA9:r
6fA92w
D#C(L9
E#k(L9
A#M(I9
E#k(L9
A#M(I9
E#k(L9
A#M(I9
E#k(L9
A#M(I9
E#P(M9
E#k(L9
H9D$0~
H9D$0~
l$8A+I
T$tA+I
l$8M9,$u
l$(M9,$
l$(M9,$
l$(M9,$
l$(M9,$
l$(M9,$
l$(M9,$
r H9w u[H
r(H9w(uQH
r0H9w0uGH
r8H9w8u=H
H9G@u'
8s2u/H
8noneu
x @8{ u6H
x H9{ uiH
{0H9x0u_H
x@H9{@uUH
x H9{
@8{(uuH
{8H9x8uk
x@@8{@uaH
H9{PuUH
x H9{ uA
x(9{(u9H
x H9{ u
x(@8{(u
\$0H9S
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
\$P8K9
L$`H9A t
H H+H0H
l$ M9,$u
l$ M9,$u
l$ M9,$u
D$H8H8
L9G@|4H
L9D$(t
I H9K
l$ M9,$u
l$ M9,$u
H9S u+H
Q(H9S(u!H
Q0H9S0u
H H9K u
H(8K(u
H0H9K0
?TRUEt
?Truet
?trueuK1
?FALSf
?Falsu
?falsu
v$H9r8r
I9p0~B
H H9H(t
9Idlet
9Flowu
8s2u/H
8noneu
\$Pt'H
:PURGu2
?PURGu
$JS.API.I90@
s(H9K0
t$@H9V
8wsuLH
8wsu#A
V(H9V0
l$0M9,$u
l$(M9,$u
:INFOt
8PONGu
l$(M9,$u
stale coH9
nnectionH9P
NATS/1.0H9
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
?OBJ_@
?OBJ_A
?OBJ_A
H9r`}SD
H9H(~LH
Z0H+Z(H
x @8{ u6H
x H9{ u
x(H9{(uUH
|$0@8w(u
_0H9O8u
T$0H9J
SPH9PPu}H
S`H9P`usH
x(@8{(
x*@8{*uuH
H9F0u
T$08J@
H9O uyH
r0H9w0uoH
w@H9r@ue
x(H9{(u6H
N8H9F0u+
IHH9KH
x H9{ u6H
T$0H9J
x H9{ u6H
H9F uU
N8H9F0u0
JHH9B@t
P H9S u-H
P(H9S(u#H
p8H9S0t
T$0H9J
{8H9x8
xH@8{Hu~
xI@8{IutH
l$0M9,$
l$@M9,$
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$0M9,$
l$0M9,$
l$0M9,$
l$0M9,$
l$0M9,$
l$0M9,$
l$0M9,$
l$ M9,$u
l$ M9,$u
l$ M9,$u
T$0H9J
{ H9x
{@H9x@
{`H9x`
xxH9{x
T$0H9J
H H9K
T$0H9J
T$0H9J
I H9K
\$0H9S
Q H9S uH
Q(H9S(u
I0H9K0
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$HM9,$
l$HM9,$
l$8M9,$u
l$8M9,$u
l$@M9,$u
l$8M9,$
l$8M9,$
l$8M9,$u
8ignou
8paniu
t$`H95O|
:Messf
MapValueM9"
ContainiM9"
H9t$@}
PhH9Shu
8-infu
t8H9=p]
l$xM9,$
l$(M9,$u
l$@M9,$
l$pM9,$
l$(M9,$u
T$0H9J
H`H9Hhu9H
H9Hxu,H
protu f
t$09|$0
L$H9T$Lu[H
D9D$P~
D9D$@A
D$0D9L$0~
\$(8S0u
I8H9K8
{(H9x(u6H
T$(H9J0
T$0H9J(
|$09w0uEH
Z@H9G8u3
\$08SHu
QI8SIu
IPH9KP
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
J(H9B t
zigzag32H9
zigzag64
zigzag64
zigzag32I
zigzag64H
8grouu(
zigzag32I
zigzag64
zigzag32I
zigzag64
8packu,f
zigzag32I
zigzag64
8def=A
8protuOf
zigzag64M
zigzag32L
H954k
T$HHc:
>protu5f
XXX_weakH9
sizeCach
weakFielH9
XXX_weakH
XXX_sizeH9
sizeCachH
unknownFL9
XXX_exte
extensioH9
XXX_exte
XXX_unre
cognizedL9@
XXX_sizeI
unknownFH
XXX_sizeI
unknownF
XXX_sizeI
unknownF
cognized
XXX_exteH
T$0H9J
N(H9F
|$0H9wH
ZhH9F`
|$09wp
T$0H9J
Z(H9F t
l$`M9,$
l$ M9,$u
l$(M9,$u
l$PM9,$
l$@M9,$u
l$@M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$HM9,$u
l$ M9,$u
l$HM9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$HM9,$
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$PM9,$
l$8M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$HM9,$
l$0M9,$u
l$(M9,$u
l$8M9,$u
google.pH9
EnumOpti
EnumOptiI
FileOpti
FileOptiL9
EnumOptiI
FileOptif
FieldOpt
EnumOptiI
FileOpti
OneofOptf
EnumOptiI
FileOpti
EnumOptiI
FileOpti
MethodOp
EnumOptiI
FileOptif
EnumOptiI
FileOpti
MessageOL9
EnumOptiI
FileOpti
ServiceOf
EnumOptiI
FileOptif
EnumOptiI
FileOpti
EnumValuL9
eOptionsL9N
EnumOptiI
FileOpti
eOptionsI
EnumOptiI
FileOpti
EnumOptiI
FileOpti
EnumOptiI
FileOpti
EnumOptiI
FileOpti
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
x H9{ u@
x(@8{(u6H
?secouDf
?byteu
l$0M9,$
l$ M9,$
l$ M9,$
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$pM9,$
:textf
delimiteH92u-
compact-H92u
>0.0.u
:textuG
delimiteL9
compact-L9
;textuZH
:plaiu?
:0.0.u
>0.0.u
>1.0.u
>1.0.u"
\$stI
l$ M9,$u
l$ M9,$
quantileI9}
quantile
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Stealer.tstV
tehtris Clean
DrWeb Trojan.KillProc2.22423
MicroWorld-eScan Clean
FireEye Clean
CAT-QuickHeal Clean
Skyhigh Artemis
ALYac Clean
Malwarebytes Trojan.Dropper
Zillya Clean
Sangfor Spyware.Win32.Agent.Vrza
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike Clean
Arcabit Clean
BitDefenderTheta Clean
VirIT Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (moderate confidence)
ESET-NOD32 a variant of WinGo/Kryptik.DZ
Cynet Malicious (score: 99)
APEX Clean
Paloalto Clean
ClamAV Clean
Kaspersky Trojan-Spy.Win32.Stealer.ezcx
Alibaba Clean
NANO-Antivirus Trojan.Win64.Stealer.kdtnvk
ViRobot Clean
Rising Clean
Emsisoft Clean
F-Secure Trojan.TR/Spy.Stealer.hopmz
Baidu Clean
VIPRE Clean
TrendMicro Trojan.Win64.SMOKELOADER.YXDKQZ
Trapmine Clean
CMC Clean
Sophos Mal/Generic-S
SentinelOne Clean
Jiangmin Clean
Webroot Clean
Varist W64/ABRisk.ZTOJ-7163
Avira TR/Spy.Stealer.hopmz
MAX Clean
Antiy-AVL Trojan/Win32.Kryptik
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Malware.Win64.RedLine.bot
Xcitium Clean
Microsoft Trojan:MSIL/Redline.MG!MTB
SUPERAntiSpyware Clean
ZoneAlarm Trojan-Spy.Win32.Stealer.ezcx
GData Win64.Trojan.Agent.WKZN5H
Google Detected
AhnLab-V3 Trojan/Win.Generic.R621603
Acronis Clean
McAfee Artemis!9BBDC08C91D9
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Trojan.Win64.SMOKELOADER.YXDKQZ
Tencent Win32.Trojan-Spy.Stealer.Mjgl
Yandex Clean
Ikarus Trojan.SuspectCRC
MaxSecure Clean
Fortinet W32/PossibleThreat
AVG Win64:Evo-gen [Trj]
Cybereason Clean
Avast Win64:Evo-gen [Trj]
No IRMA results available.